Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: rLp29ma9/5hZN6PZ0zqv1Tdht9mi2ehPIF3Bs21AUaQ=
Subject key identifier: F0:27:38:02:8E:DB:60:A7:AF:CD:B3:16:84:84:A5:15:56:EE:97:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3663AF15209997BFEBE47FCA8F58E7FC229C903E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 22 Aug 2025 14:47:14 +0000
ROA not before: Fri 22 Aug 2025 14:42:14 +0000
ROA not after: Fri 21 Aug 2026 14:47:14 +0000
asID: 141039
IP address blocks: 185.202.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:63:af:15:20:99:97:bf:eb:e4:7f:ca:8f:58:e7:fc:22:9c:90:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:14 2025 GMT
Not After : Aug 21 14:47:14 2026 GMT
Subject: CN=F02738028EDB60A7AFCDB3168484A51556EE97CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:ce:2e:17:40:6d:de:94:51:c3:91:01:2f:
53:46:3a:31:52:2a:6b:42:35:d7:1a:9e:7d:83:37:
f4:46:e6:75:48:e2:7c:d4:49:84:f2:2c:b4:4d:4b:
b9:17:ea:49:c3:62:4a:2f:24:7e:23:91:ea:39:e2:
4f:8b:b2:7c:b2:10:a5:5e:a6:ff:61:fe:e6:b2:18:
4a:98:95:af:fa:66:8c:a2:95:df:00:03:2b:48:15:
93:53:8a:5b:9e:f0:95:95:ec:22:0c:11:fa:23:6b:
31:1e:41:0b:9a:5e:2d:ea:8b:69:c9:a3:31:db:62:
69:32:48:c2:96:bf:5d:7c:9d:f0:a4:be:27:7e:a8:
30:22:59:7e:8d:52:bf:31:cb:14:1b:fb:e1:b4:05:
ac:5c:39:d9:99:9c:f2:af:76:95:85:9d:d5:b2:07:
91:a2:dd:d7:15:fb:d9:fa:66:db:f1:d1:a0:9f:85:
90:fd:15:37:a4:f5:2f:d7:1f:04:97:9c:fd:0c:57:
8e:91:8c:c9:18:a0:e9:38:3e:52:41:4f:b7:b3:51:
04:c0:23:e2:b1:e0:01:00:d1:9a:12:50:c7:8b:c4:
23:85:d4:44:9a:a6:57:c0:f4:cc:11:03:d6:27:64:
f6:4e:9c:67:44:e8:17:2c:01:43:c0:a8:50:ab:db:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:27:38:02:8E:DB:60:A7:AF:CD:B3:16:84:84:A5:15:56:EE:97:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.220.0/24
Signature Algorithm: sha256WithRSAEncryption
82:79:7b:00:45:1f:f2:d2:5b:db:7f:1a:f7:7c:82:de:93:19:
7e:1d:7e:5a:5e:54:8d:1c:51:2c:e6:94:39:55:8e:ee:5c:fb:
87:7a:53:15:ee:cb:9c:f2:05:1a:c8:7c:f3:7e:68:a0:41:14:
f5:22:0c:b4:d1:05:57:ca:37:7b:ba:53:1a:57:73:8b:95:b8:
f5:c7:d3:93:6d:4a:08:ef:a7:46:ec:30:fc:53:96:c1:a6:d4:
47:a5:ff:ef:36:a1:cb:87:e5:e2:28:18:e5:37:d8:99:66:a9:
63:d9:8c:e5:e8:e1:6c:c5:ee:8d:ec:0c:d7:1d:c0:92:c6:4a:
3e:2a:ca:10:f6:00:fe:81:51:95:40:19:e6:5d:ef:b6:ea:de:
40:95:d6:fb:60:19:95:54:15:de:a5:5e:c0:eb:7e:6c:1b:2c:
75:5a:2e:de:91:c0:fd:1f:42:c3:47:68:a5:89:e6:0f:51:c1:
2e:88:c7:5f:ff:8c:9b:89:44:09:39:17:16:93:b5:10:9c:0b:
ab:80:30:4d:d0:60:93:0f:74:26:c7:52:69:54:57:eb:7e:fe:
d5:f2:75:54:37:5e:48:d0:3d:c0:85:7a:b4:44:84:37:7b:78:
0d:01:12:56:da:ea:54:c1:da:12:fa:4b:a8:bd:bc:82:dd:52:
5a:61:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:29 2025 by rpki-client